Crash during zpool destroy

[Imtiaz Mohammad]

Child-SP RetAddr Call Site

00 ffff9a0fc06a6098 fffff80731e82572 nt!KeBugCheckEx
01 ffff9a0fc06a60a0 fffff80731e4458f nt!PspSystemThreadStartup$filt$0+0x44
02 ffff9a0fc06a60e0 fffff80731e72ebf nt!_C_specific_handler+0x9f
03 ffff9a0fc06a6150 fffff80731cd2390 nt!RtlpExecuteHandlerForException+0xf
04 ffff9a0fc06a6180 fffff80731d749c4 nt!RtlDispatchException+0x430
05 ffff9a0fc06a68d0 fffff80731e7bcc2 nt!KiDispatchException+0x144
06 ffff9a0fc06a6f80 fffff80731e77fae nt!KiExceptionDispatch+0xc2
07 ffff9a0fc06a7160 fffff801ecdcd6b5 nt!KiPageFault+0x42e
08 ffff9a0fc06a72f8 fffff801ece28029 ZFSin!list_remove+0x19 [C:\Users\akv\Desktop\ZFSin\ZFSin\spl\module\spl\spl-list.c @ 120]
09 ffff9a0fc06a7300 fffff801ece8a46c ZFSin!bplist_iterate+0x41 [C:\Users\akv\Desktop\ZFSin\ZFSin\zfs\module\zfs\bplist.c @ 71]
0a (Inline Function) ---------------- ZFSin!spa_sync_frees+0x2a [C:\Users\akv\Desktop\ZFSin\ZFSin\zfs\module\zfs\spa.c @ 7950] 0b ffff9a0fc06a7340 fffff801ece98d5c ZFSin!spa_sync+0x554 [C:\Users\akv\Desktop\ZFSin\ZFSin\zfs\module\zfs\spa.c @ 8632] 0c ffff9a0fc06a7430 fffff80731d8e645 ZFSin!txg_sync_thread+0x2bc [C:\Users\akv\Desktop\ZFSin\ZFSin\zfs\module\zfs\txg.c @ 597] 0d ffff9a0fc06a74d0 fffff80731e7182c nt!PspSystemThreadStartup+0x55 0e ffff9a0fc06a7520 00000000`00000000 nt!KiStartSystemThread+0x1c

@lundman lold->list_next happened to be NULL which triggered a crash at
https://github.com/openzfsonwindows/ZFSin/blob/master/ZFSin/spl/module/spl/spl-list.c#L120

I see the assert two lines above
ASSERT(lold->list_next != NULL);
which suggests someone tried to troubleshoot this issue in the past. Do you know if there are any known issues around that code? Which direction to investigate in?

Unfortunately, the build has some custom changes (unrelated to the crash) and the crash itself happens intermittently.